---
title: "Security and compliance"
canonical: "https://support.appfire.com/space/OFJ/603652307/Security%20and%20compliance"
format: markdown
---
> Macro (aura-html)

> ℹ️ This page is about **OKR for Jira Cloud**.

## **Security** 

- **Continuous monitoring:** We constantly monitor security and process compliance to ensure your data is safe.
- **Code review & analysis:** All code undergoes peer review and automatic static analysis to identify vulnerabilities.
- **Data encryption:** Data is encrypted at rest for added protection.
- **Third-party verification:** Source code dependencies are scanned for potential security risks.
- **Security training:** All employees receive comprehensive security awareness training.
- **Multi-factor authentication:** Multi-factor authentication is required for all systems.
- **Background checks:** Rigorous background checks are conducted for all staff.
- **Bug bounty program:** We actively participate in [bug bounty programs](https://www.atlassian.com/licensing/marketplace#what-is-the-marketplace-bug-bounty-program) to identify and address potential issues.

## Reliability

- **[Platinum Partner Support](https://developer.atlassian.com/platform/marketplace/marketplace-partner-program/)****:** We are a Platinum Atlassian Marketplace Partner, ensuring the highest level of support.
- **Multiple support channels:** We offer convenient support through a dedicated [Support Portal](https://appfire.atlassian.net/servicedesk/customer/portal/11) and [email](mailto:support@appfire.com).
- **Extensive experience:** With over 6 years on the Atlassian Marketplace, we have a proven track record of success.
- **[Cloud Fortified](https://developer.atlassian.com/platform/marketplace/cloud-fortified-apps-program-support-requirements/)****:** We meet strict Cloud Fortified security standards for cloud-based applications.

## Compliance

- **ISO 27001 Certification:** We are actively pursuing ISO 27001 certification, a globally recognized security standard.
- **[GDPR Compliance](https://appfire.com/gdpr/)****:** We are committed to complying with GDPR regulations for data protection.
- **Transparent ****[Privacy Policy](https://appfire.com/privacy-policy/)****:** Our detailed privacy policy clearly outlines how we handle your data.

## Data storage

#### What OKR data is stored by Appfire?

Appfire stores the following data to support OKR functionality:

- **Objective and Key Result details**: names, descriptions, labels, teams, and hierarchy levels
- **Key Result values**: including historical progress over time
- **Time periods**: names and associated date ranges
- **Issue references**: IDs of Jira issues linked to OKRs
- **User references**: user IDs only (no personal details)

#### Does Appfire store or duplicate any sensitive Jira data?

No. Appfire does not duplicate or store sensitive data from Jira.

- Jira data is **referenced by ID only**, not copied.
- **User details** such as names and email addresses are **not stored**.
- **Issue content** such as summary, description, and status is **not retained** by Appfire.

#### Where is OKR for Jira data stored?

All OKR for Jira data is stored securely in [Atlas Mongo](https://www.mongodb.com/), hosted on [Amazon Web Services](https://aws.amazon.com/)** (AWS)** infrastructure.

- Data is hosted in either the **United States** or the **European Union**, depending on the data residency of your Jira instance.
- Your data remains within the region aligned with your Jira Cloud hosting location.

---

Should you have any questions regarding our [data security policy](https://appfire.com/eula/#DataSecurity), please refer to [EULA FAQ](https://appfire.com/eula-faq/) or [contact us](https://appfire.com/eula-contact/).